Skip to content
← Registry
Trust Report

browser-use

Use Browser Use cloud API to spin up cloud browsers for Clawdbot and run autonomous browser tasks. Primary use is creating browser sessions with profiles (persisted logins/cookies) that Clawdbot can control. Secondary use is running task subagents for fast autonomous browser automation. Docs at docs.browser-use.com and docs.cloud.browser-use.com.

63
SUSPICIOUS
Format: openclawScanner: v0.8.0Duration: 25msScanned: 4d ago · May 6, 11:18 PMSource →
Embed this badge
AgentVerus SUSPICIOUS 63AgentVerus SUSPICIOUS 63AgentVerus SUSPICIOUS 63
[![AgentVerus](https://agentverus.ai/api/v1/skill/750d9eb8-efb8-4fa8-9064-4d4ec9e6fab8/badge)](https://agentverus.ai/skill/750d9eb8-efb8-4fa8-9064-4d4ec9e6fab8)
Community Discussion

Community Comments

Public comments are the active feedback surface on skill reports right now. Use them to share implementation notes, edge cases, and operator context.

0 comments

Sign in to comment on this skill

No comments yet. Be the first to share your thoughts.

Continue the workflow

Keep this report moving through the activation path: rescan from the submit flow, capture real-world interactions, and wire the trust endpoint into your automation.

https://agentverus.ai/api/v1/skill/750d9eb8-efb8-4fa8-9064-4d4ec9e6fab8/trust
Personalized next commands

Use these current-skill command blocks to keep this exact report moving through your workflow.

Record an interaction
curl -X POST https://agentverus.ai/api/v1/interactions \
  -H "Authorization: Bearer at_your_api_key" \
  -H "Content-Type: application/json" \
  -d '{"agentPlatform":"openclaw","skillId":"750d9eb8-efb8-4fa8-9064-4d4ec9e6fab8","interactedAt":"2026-03-15T12:00:00Z","outcome":"success"}'
Fetch trust JSON
curl https://agentverus.ai/api/v1/skill/750d9eb8-efb8-4fa8-9064-4d4ec9e6fab8/trust

Category Scores

29
Permissions
75
Injection
4
Dependencies
95
Behavioral
70
Content
100
Code Safety

Findings (12)

highCapability contract mismatch: inferred credential access is not declared-15

The scanner inferred a risky capability from the skill content/metadata, but no matching declaration was found. Add a declaration with a clear justification, or remove the behavior.

Content pattern: read from clawdbot config at `skills.entries.browser-use.apiKey

Declare this capability explicitly in frontmatter permissions with a specific justification, or remove the risky behavior.

permissionsASST-05
highCapability contract mismatch: inferred command execution is not declared-12

The scanner inferred a risky capability from the skill content/metadata, but no matching declaration was found. Add a declaration with a clear justification, or remove the behavior.

Content pattern: exec

Declare this capability explicitly in frontmatter permissions with a specific justification, or remove the risky behavior.

permissionsASST-03
highCredential access detected-25

Found credential access pattern: "read from clawdbot config at `skills.entries.browser-use.apiKey"

**API Key** is read from clawdbot config at `skills.entries.browser-use.apiKey`.

Remove references to credentials and secrets. Skills should never access sensitive authentication data.

injectionASST-05
mediumCapability contract mismatch: inferred file read is not declared-6

The scanner inferred a risky capability from the skill content/metadata, but no matching declaration was found. Add a declaration with a clear justification, or remove the behavior.

Content pattern: references/

Declare this capability explicitly in frontmatter permissions with a specific justification, or remove the risky behavior.

permissionsASST-03
mediumCapability contract mismatch: inferred network access is not declared-6

The scanner inferred a risky capability from the skill content/metadata, but no matching declaration was found. Add a declaration with a clear justification, or remove the behavior.

Content pattern: https://docs.browser-use.com

Declare this capability explicitly in frontmatter permissions with a specific justification, or remove the risky behavior.

permissionsASST-04
mediumCapability contract mismatch: inferred browser automation is not declared-8

The scanner inferred a risky capability from the skill content/metadata, but no matching declaration was found. Add a declaration with a clear justification, or remove the behavior.

Content pattern: browser automation

Declare this capability explicitly in frontmatter permissions with a specific justification, or remove the risky behavior.

permissionsASST-03
mediumCapability contract mismatch: inferred documentation ingestion is not declared-8

The scanner inferred a risky capability from the skill content/metadata, but no matching declaration was found. Add a declaration with a clear justification, or remove the behavior.

Content pattern: See [references/

Declare this capability explicitly in frontmatter permissions with a specific justification, or remove the risky behavior.

permissionsASST-03
mediumCapability contract mismatch: inferred payment processing is not declared-8

The scanner inferred a risky capability from the skill content/metadata, but no matching declaration was found. Add a declaration with a clear justification, or remove the behavior.

Content pattern: $0.06

Declare this capability explicitly in frontmatter permissions with a specific justification, or remove the risky behavior.

permissionsASST-03
mediumMany external URLs referenced (11)-8

The skill references 11 external URLs and also discusses auth/API/payment workflows, which increases the chance that sensitive operations depend on many remote endpoints.

URLs: https://docs.browser-use.com, https://docs.cloud.browser-use.com, https://cloud.browser-use.com, https://api.browser-use.com/api/v2`, https://api.browser-use.com/api/v2/browsers...

Minimize external dependencies to reduce supply chain risk.

dependenciesASST-04
mediumSession inventory and reuse detected-5

Found session inventory and reuse pattern: "List active sessions" Related auth/profile context: - auth/session capability-contract context — Capability contract mismatch: inferred file write is not declared

# List active sessions

Treat session inventory, reuse, and bulk cleanup commands as sensitive session-management capability. Be explicit about which sessions may be reused or enumerated, and avoid exposing shared authenticated state by default.

behavioralASST-05
mediumUnknown external reference-8

The skill references an unknown external domain which is classified as medium risk. Merged overlapping signals from the repeated finding family: - Unknown external reference

https://docs.browser-use.com

Verify that this external dependency is trustworthy and necessary.

dependenciesASST-04
lowNo explicit safety boundaries-10

The skill does not include explicit safety boundaries defining what it should NOT do.

No safety boundary patterns found

Add a 'Safety Boundaries' section listing what the skill must NOT do (e.g., no file deletion, no network access beyond needed APIs).

contentASST-09